Dear Maintainer,

I am now using the attached kernel hook, installed in
/etc/kernel/install.d/59-gen-ukify-conf.install, in order to have my
/etc/kernel/uki.conf file automatically populated with the current
kernel’s supported dtbs using stubble’s finddtbs.py script.

Since stubble is a dependency of this, it seems to be a good place to
propose this script in an extra binary package if users want to have
their /etc/kernel/uki.conf too.

Since this is a distro thing I did not raise this issue to upstream
proper, but if you this it would make more sense please let me know.

I am thinking of having an extra "stubble-ukify" binary package that
installs this hook (probably in /usr/lib/kernel/install.d instead of
/etc?) so that stubble can be very easily be used on final systems
with the kernel hook calling its finddtbs.py script.

Thoughts?

Thanks,

Agathe.

Hi,

Sounds good to me - happy to review any PRs on salsa - added Tobias in CC for any other comments.


Cheers!

Chris

Hi all

I've been using Agathe's uki.conf generator a while, but there were a
few downsides:
- generates a file in /etc
- required using full-blown UKIs, which a) take a lot of limited ESP
  space, b) don't play well with distro's secure boot implementation

Instead, I've tested an alternate approach based on what I believe
Ubuntu and Fedora do: post-process the kernel image to tack just a DTB
loader in front.

I've sent it upstream here:
https://github.com/ubuntu/stubble/pull/89

I've only tested it with systemd-boot, not with GRUB, and this also
doesn't help with full-blown UKIs.

Thoughts welcome! I wonder if there's a chance we could get this in
systemd upstream, next to other kernel-install hooks and next to the new
machine database.

Best,